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CloudConnexa™ 


The virtualized secure network platform that delivers essential zero trust network access (ZTNA) capabilities as a service. 


Cloud Connexa takes the cost and complexity out of secure 
connectivity to keep your business operating safely and efficiently 
by reliably identifying and routing trusted applications and traffic 
using an integrated multi-tenant virtual network with built-in critical 
security functions.. 


With Cloud Connexa, your business can easily deploy and manage 
a secure overlay network that connects all of your applications, 
private networks, workforce, and loT devices without the cost and 
expense of owning and managing complex, hard-to-scale security 
and data networking gear. 
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e fnttps://openvpn.net/solutions/use-cases/secure-remote-access 
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What are the benefits of Cloud Connexa service? 


Our secure overlay network provides access to private business applications hosted in multiple on-premises and virtual private cloud networks 
using application domain names (e.g., app.mycompany.com) alone. Plus, by combining a secure private overlay network, built-in security 
features, and application name-based routing, we deliver the following to your business: 


© 


Ease of Use 


Lowers the data networking expertise needed by 
eliminating the complexity of IP address routing and 
private IP address space management. 


Y 


Secure Cross-Network Access 


Provides access from one network to applications 
hosted in another network instead of creating a full- 
access, site-to-site connection between the two. 


@ 


Restricted Internet Access 


Enables tunneling of connected entity internet traffic to 
one or more customer-owned internet gateways to apply 
corporate internet access policies or limit internet access 
to trusted destinations. 


Y 


As-a-Service Offering 


Simplifies deployment, scaling, and management by 
eliminating the need for networking and security 
appliances. 


G 


Device Identity Verification & 
Enforcement (DIVE) 


Minimize your network attack surface, and give Admins 
full visibility into devices used, by limiting authenticated 
user access to trusted devices with unique digital 
identities. 
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Secure Private App Access 


Expands access to all applications — web and otherwise 
— by supporting all TCP and UDP application protocols. 


i 


ZTNA Essentials 


Uses identity-based policies for applications access and 
application-based network segmentation to block lateral 
movement. 


a 


Supports Unattended Devices 


Secures and routes traffic to specialized applications 
from unattended connected devices such as points of 
service (POS) terminals and other loT devices. 


All-in-One Solution 


Delivers a secure, distributed wide-area private cloud 
(WPC) across global meshed points of presence with the 
essentials needed for ZTNA, and site-to-site networking. 


= 


Cloud App Sharing 


This built-in Cloud Connexa feature lets App Providers 
share access to public or private domain-based Network 
or Host Applications with CloudConnexa tenants. 


Secure Private Networking 


Enables private networking even when IP 
address subnet ranges conflict due to 
overlap. 


Secure SaaS App Access 


Tunnels traffic to SaaS app domain names to 
a customer-owned internet gateway while 
allowing other internet traffic to use local 
direct internet access. 


Value Add Security Features 


Delivers added protection from cyber threats, 
plus cost savings, with built-in critical security 
functions that eliminate the need for 
additional security appliances. 


Built-in Protections 


Protects against DoS attacks by handling all 
inbound connections through Cloud Connexa 
instead of your on-premise or cloud 
environment. 
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What Makes Cloud Connexa Different? 


Unlike other solutions, Cloud Connexa 
offers a service that: 


@ Provides a secure, distributed, virtualized networking 
platform with integrated essential value-add network 
security functions but with the flexibility to augment 
your security posture with add-on security controls 
implemented at your private internet gateway to 
meet your requirements. 


v Consolidates advanced network security, secure 
remote access, advanced encryption, IP and domain 
routing, essential intrusion detection and prevention, 
safe content filtering, and firewall capabilities into a 
single cloud-based service. 


(7 Leverages the market-proven, open source OpenVPN 
tunneling protocol that boasts over 60 million 
downloads. 


@ Reduces the cost and complexity for smaller mid- 
market businesses and branch locations for larger 
enterprises. 


v Provides the foundational network security and role-based secure access for zero trust networking. 


© Uses Application Domain-based Routing so you can easily route traffic to applications distributed among your various 


connected private networks using the application’s domain name as a route to the network where that application resides. 


@ Goes beyond tunneling traffic to private resources on your network and gives you unmatched control over internet-bound 
traffic routing by User Group, Network, or Host. 


D Uses our multi-tenant cloud-delivered service for immediate, on-demand creation of a dedicated worldwide þrivate overlay] 
with built-in security features, exclusively for your use. 


@ Gives network administrators the ability to quickly and easily scale connections on demand. 


e https://openvpn.net/cloud-vpn/features/domain-routing/ 


e https://openvpn.net/cloud-vpn/features/multiple-wpc/ 
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How Does Cloud Connexa Work? 


A Global Leader in Secure Networking 


Cloud Connexa capabilities are delivered as-a-Service (aaS) from 
more than 30 worldwide points of presence (PoP) that provide 
businesses with fast, on-demand connectivity — without the need 
to acquire and manage complex networking gear. Businesses 
connect to these PoPs by running Connector software on 1) their 
application servers, 2) on lightweight virtual machines on their 
networks, or 3) by using OpenVPN protocol compatible routers to 
make applications part of the overlay network. The company’s 
workforce can then access these applications by installing the 


Connect application on devices and connecting to the closest PoP. 


Cloud Connexa separates the data plane, which includes functions 
such as data forwarding, encryption, security, and policy 
enforcement, from the control plane. The data plane functions are 
operated entirely by kernel-optimized software on bare-metal 
servers in the PoPs for high performance. The control plane runs 
on the Cloud using the latest cloud-native technologies to carry 
out policy management, event collection, and other configuration 
and authentication functions at a high scale. For maximum route 
diversity and low latency, the worldwide PoPs connect to each 
other using full-mesh topology over high-speed internet access. 


With over 60 million downloads of our core open source software and over 20,000 commercial customers, 


OpenVPN is recognized as a global leader in secure networking. 
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Why is Cloud Connexa the best choice for 
cloud-based secure network connectivity? 


Different, Not Just Better 


Cloud Connexa takes the complexity and high cost out of building and 
managing a secure network for your entire organization with a cloud- 
delivered service that is easy to deploy. Our unique cloud-based virtual 
networking platform, with built-in security functions, is offered as a 
service. This solution delivers secure remote access to private 
resources, SaaS applications, and the internet, as well as secure site- 
to-site networking and effective content filtering. This ensures your 
distributed workforce, servers, network devices, loT/IloT devices, and 
applications across your business have instant access to the services 
they need, quickly and easily, while protecting them from cyberattacks. 


Built on the market-proven OpenVPN protocol, the solution consolidates 
secure remote access, full encryption, advanced IP and domain routing, 
intrusion detection/prevention, DNS-based content filtering, and firewall 
capabilities into a virtualized, mesh-connected, high-speed network 
platform with worldwide points of presence. Cloud Connexa is the only 
cloud-delivered service that lets your business integrate virtual 
networking with essential capabilities such as firewall-as-a-service 
(FWaas), Intrusion detection and prevention system (DS/IPS} 


based content filtering, and zero trust network access (ZTNA). 
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Why is Cloud Connexa the best choice for 
cloud-based secure network connectivity? 


Networking 


Support for Site-to-Site and Remote 
Access. 


Full-mesh connectivity without 


complex configuration. 


Unique local address range available 


for Customer use. 


Support for peer-to-peer 
communication. 


Routing 


Improve network performance with 


smart routing. 


Increase redundancy with multiple 
network connections. 


IP-layer networking allows access to 


all IP-based services. 
Flexible routing of Internet traffic 


Access private services by 
connecting to any of the worldwide 
regions. 


Customers can use their private DNS 


servers. 


Domain names can be used to route 


even if there are multiple network with 


overlapping IP address ranges. 


Similar to per-app VPN policies, traffic 


can be steered into the VPN tunnel on 


a per-domain basis. 


Security 


e Enhanced security as only outgoing 
connections to CloudConnexa is 


made. 


Firewalls don’t need to be opened to 
allow incoming traffic from the 


internet. 
e DNS-based content filtering. 


e Device Identity Verification & 
Enforcement (DIVE) makes it easy for 
admins to verify device identities 
before granting network access. 


Cloud 


e Fully managed and hosted service. 


e Point-and-click centralized 


management and configuration. 


e Fast, easy creation and management 
of multiple wide-area private clouds 


(WPCs) from a single Owner account. 


IPv4 and IPv6 


Full RFC 1918 IPv4 private address 
range and IPv6 RFC 4193 


IPv6 and IPv4 support. 


Virtual worldwide private secure 
networking IPv4 and IPv6 space for 


each Tenant/Customer 


There is no limited list of protocols or 
service support. 


End User 


Offline or online connection profile 


distribution. 


Assigned IP address to User devices 
and Connectors does not change or 


depend on a connection point. 


Supports LDAP and Security 
Assertion Markup Language (SAML) 
2.0 identity federation for Single Sign- 
On (SSO). 


Cloud App Sharing allows Cloud 
Connexa tenants to share resources 


with each other. 
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Ready to Get Started with OpenVPN? 


Get Started 


We make getting started with Cloud Connexa as easy as possible by offering three free connections. Follow the steps 
below to create an account to use your free connections for remote access as long as you like. There's no credit card 


required; then scale from free to paid when you're ready. Our team is available 24/7 to guide you 
through every step of set-up and configuration and answer any questions you may have. 


v reate a Cloud Connexa account, and select an identity for your Cloud (for example, cyberone). 


@ Use our Network Wizard to configure your private network and deploy Connector. 
@ Download and launch the OpenVPN Connect app. 


v Add a profile in the Connect app by using your Cloud Connexa URL (for example, cyberone.openvpn.com), 
authenticate, and select a Region to connect. 


Have any questions? Feel free to contact us at: sales@openvpn.net 


* https://support.openvpn.com/hc/en-us 


e https://myaccount.openvpn.com/signup?product=CVPN&portal=OWNER&return=https%3A%2F %2Fcloud.openvpn.com%2F 
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